Описание
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gog:galaxy:1.2.48.36:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00083
Низкий
9.3 Critical
CVSS3
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 7.8
github
около 3 лет назад
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges.
EPSS
Процентиль: 25%
0.00083
Низкий
9.3 Critical
CVSS3
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-732